Secure digital communications

ABSTRACT

Disclosed in some examples are methods, systems, and machine readable mediums for secure end-to-end digital communications involving mobile wallets. The result is direct, secure, in-band messaging using mobile wallets that may be used to send messages such as payments, requests for money, financial information, or messages to authorize a debit or credit.

CROSS-REFERENCE TO RELATED APPLICATION

This application is a continuation of U.S. patent application Ser. No.16/057,067, filed Aug. 7, 2018, which is a continuation of U.S. patentapplication Ser. No. 15/264,540, filed Sep. 13, 2016, now Issued as U.S.Pat. No. 10,075,300, each of which are incorporated by reference hereinin their entirety.

TECHNICAL FIELD

Embodiments pertain to secure digital communications. Some embodimentsrelate to secure digital communications between mobile devices and otherdomains.

BACKGROUND

Computer networks have enabled communications between distant locations.These communications utilize protocols such as Transmission ControlProtocol (TCP), User Datagram Protocol (UDP), Internet Protocol (IP),HyperText Transfer Protocol (HTTP), Message Transfer Protocol (MTP), andthe like.

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings, which are not necessarily drawn to scale, like numeralsmay describe similar components in different views. Like numerals havingdifferent letter suffixes may represent different instances of similarcomponents. The drawings illustrate generally, by way of example, butnot by way of limitation, various embodiments discussed in the presentdocument.

FIG. 1 shows a schematic of a mobile wallet secure digital communicationenvironment according to some examples of the present disclosure.

FIG. 2 shows a schematic of a mobile wallet to mobile wallet securedigital communication according to some examples of the presentdisclosure.

FIG. 3 shows a message sequence chart showing a mobile walletcommunication according to some examples of the present disclosure.

FIG. 4 shows a message sequence chart that is a continuation of FIG. 3according to some examples of the present disclosure.

FIG. 5 shows a flowchart of a method of an MUA sending a mobile walletmessage according to some examples of the present disclosure.

FIG. 6 shows a flowchart of a method of a MTA requesting a public key ofa recipient mobile wallet according to some examples of the presentdisclosure.

FIG. 7 shows a flowchart of a method of a MTA sending a message toanother MTA according to some examples of the present disclosure.

FIG. 8 shows a flowchart of a method of an MTA receiving a message sentby another MTA according to some examples of the present disclosure.

FIG. 9 shows a flowchart of a method of a recipient MSA receiving amessage according to some examples of the present disclosure.

FIG. 10 shows a flowchart of a method of a recipient MUA receiving amessage is shown according to some examples of the present disclosure.

FIG. 11 shows an example message sequence chart of a recipient MTAverifying the authenticity of the sender.

FIG. 12 shows a flowchart of a method for verifying the sender of amobile wallet message is shown according to some examples of the presentdisclosure.

FIG. 13 shows an example message sequence chart of a securedtransmission of a mobile wallet message from a sender to a recipient.

FIG. 14 shows a flowchart of a method for securing mobile wallet messagetransmissions between a sender and a recipient according to someexamples of the present disclosure.

FIG. 15 shows a flowchart of a method for securing mobile wallet messagetransmissions between a recipient and a sender according to someexamples of the present disclosure.

FIG. 16 shows a schematic of a logical diagram of a user computingdevice according to some examples of the present disclosure.

FIG. 17 shows a schematic of a mobile wallet domain computing deviceaccording to some examples of the present disclosure.

FIG. 18 is a block diagram illustrating an example of a machine uponwhich one or more embodiments may be implemented.

DETAILED DESCRIPTION

A mobile wallet (also known as an electronic or digital wallet) refersto an application program executed by one or more computing devices(e.g., mobile devices such as a smartphone) and corresponding devicememory which store and manage digital representations of elements (oritems) typically found in a user's wallet or purse. These elements maycomprise payment elements and non-payment elements. Payment elements areitems which may be used in a financial transaction. Example paymentelements managed by the digital wallet include digital representationsof transaction cards, financial information, discount coupons, giftcards, subway passes, movie tickets, and so on. Example non-paymentelements include digital representations of driver's licenses,passports, student ids, library cards, membership cards, insurancecards, and so on. The mobile wallet application allows an individual touse the stored information to pay for items (either in person or ine-commerce transactions), provide for identification (e.g., producing adriver's license), transfer money to others, access bank accounts,collect discount coupons, submit subway passes, and the like. As anotherexample, a mobile wallet may be used to verify the age of a buyer whilepurchasing alcohol. Exemplary mobile wallets include but are not limitedto APPLE PAY®, ANDROID PAY®, GOOGLE WALLET, CURRENT C® by MCX®, SAMSUNGPAY®, and peer-to-peer payment apps such as VENMO, SQUARE CASH®, andTILT APP®.

Mobile wallet applications of one user presently do not securelycommunicate with the mobile wallet applications of another user. Theuser of the mobile wallet must perform any such communicationsout-of-channel through email, short message service, or the like. Thesecommunications may not be secure.

Disclosed in some examples are methods, systems, and machine readablemediums for secure end-to-end digital communications involving mobilewallets. The result is direct, secure, in-band messaging using mobilewallets that may be used to send messages such as payments, requests formoney, financial information, messages to authorize a debit or credit,and messages to provide an identification of the user.

In some examples, mobile wallets will each have an address which willutilize a new Internet top-level domain. For example,fred.jones@abc.mwallet, where “abc” is a mobile wallet domain andmwallet is the top-level domain. While “.mwallet” is used herein, one ofordinary skill with the benefit of the present disclosure willappreciate that other top-level domain names may be utilized. A mobilewallet domain may provide one or more services to the mobile wallets inits domain to facilitate mobile wallet communications. In some examples,mobile wallet domains may be provided by mobile wallet providers.

A first mobile wallet (sender mobile wallet) sends a message to a secondmobile wallet (recipient mobile wallet) by utilizing a mobile walletmessage transfer agent (MTA) provided by its mobile wallet domain. TheMTA of the sender mobile wallet retrieves the public key of therecipient mobile wallet from a public key server (PKS) provided by therecipient's mobile wallet domain. The sender mobile wallet encrypts themessage with this public key, sends it to the MTA in its mobile walletdomain, which then sends the message to an MTA provided by therecipient's mobile wallet domain. The recipient mobile wallet domain'sMTA stores the encrypted message in a message storage agent (MSA). TheMSA notifies the recipient mobile wallet application of the request. Therecipient mobile wallet may then download the message and decrypt itwith its private key. The encryption keys may be created by the mobilewallets or the mobile wallet domains. The public key may be stored witha PKS and the private key may be maintained in one or more of: themobile wallet in an encrypted form, the mobile wallet domain provider(e.g., mobile wallet provider), and a trusted third party (which may notbe related to the mobile wallet domain provider).

Through utilizing this process, two mobile wallets may securelycommunicate. Additionally, mobile wallet communications may not belimited to two mobile wallets communicating. The methods and systemsdisclosed here may be utilized where only one endpoint is a mobilewallet. For example, a merchant may accept a mobile wallet paymentthrough a mobile wallet message. Mobile wallets may communicate with oneor more financial institutions using the methods and systems describedto authorize payments, deduct funds, transfer funds, and the like.Mobile wallets may communicate with any number of endpoints using thedisclosed techniques. Other example endpoints include governmentagencies, individuals, sellers, buyers, and the like. For example, amobile wallet may communicate information about a digital identificationwith a merchant to provide age verification for certain products.

Turning now to FIG. 1, a schematic 1000 of a mobile wallet securedigital communication environment is shown according to some examples ofthe present disclosure. Three mobile wallet domains 1010, 1020, and 1030are shown. Mobile wallet domains 1010 and 1030 include two respectiveuser computing devices 1040 and 1050 with mobile wallet applications1060 and 1070 executing along with operating systems 1080 and 1090respectively. Mobile wallet domains may be provided by one or moremobile wallet providers. Mobile wallet providers may administer one ormore mobile wallet domains. The mobile wallet applications 1060 and 1070may originate from the mobile wallet providers 1120 and 1130respectively.

Mobile wallet applications 1060 and 1070 store one or more datastructures that store digital representations of payment and non-paymentelements of the user. In some examples, this may be identificationinformation (drivers licenses), financial information (credit cardinformation, bank card information, bank account information), and thelike. A digital representation may include one or more informationfields stored by the mobile wallet and providing information about theuser (e.g., account number, user age, user name, and the like) and insome cases verification (e.g., a certificate or other means to assurethat the digital representation is authentic). Operating systems 1080and 1090 provide services to the mobile wallets (and other applications)on the computing devices 1040 and 1050 such as scheduling tasks forexecution, controlling peripherals, providing an interface to thehardware, managing memory, and the like.

Computing devices 1040 and 1050 may also contain data storage devices1100 and 1110 that may store mobile wallet application data, includingmobile wallet messages, encryption keys, address books, data structuresstoring information about the user of the computing device (such asinformation on payment and non-payment elements of the mobile wallet),and the like. Mobile wallet domains 1010, and 1030 may have mobilewallet providers 1120 and 1130 that provide mobile wallet communicationservices to the mobile wallets within their respective mobile walletdomains 1010 and 1030. Example services include message forwarding,message storage, message encryption, and the like.

Domain Name Service (DNS) 1135 translates a domain name (e.g.,abc@walletprovider.mwallet) to an Internet Protocol (IP) address thatmay be utilized to send messages to that mobile wallet domain. Mobilewallet domains 1010, 1020, 1030, and DNS 1135 may communicate overcomputer network 1150, which in some examples may be the Internet.Mobile wallet domain 1020 may include mobile wallet element issuer 1160.Mobile wallet element issuer 1160 may contain applications which maycommunicate with mobile wallets in other mobile wallet domains accordingto the present disclosure. Example mobile wallet issuers include banks,merchants, government organizations, corporations, or the like. In someexamples, the mobile wallet provider (e.g., mobile wallet providers 1120and/or 1130) and the mobile wallet element issuer 1160 may be the sameentity.

Mobile wallet element issuer 1160 may issue one or more identificationcards, credit cards, bank cards, bank accounts, or the like to one ormore users of mobile wallets (e.g., mobile wallet applications 1060 and1070). Mobile wallet element issuer 1160 may include one or more of thecomponents of mobile wallet providers 1120 and 1130 as shown in FIG. 2(e.g., PKS, MTA, MSA). In some examples, these elements may be issued bysending the digital representations to one or more mobile walletrecipients. Thus, using the disclosed techniques, it may be possible toautomatically provision and populate a mobile wallet with littleconsumer effort.

Turning now to FIG. 2, a schematic 2000 of a mobile wallet to mobilewallet secure digital communication is shown according to some examplesof the present disclosure. Mobile wallet domain 2010 may be an exampleimplementation of mobile wallet domain 1010 and mobile wallet domain2030 may be an example implementation of mobile wallet domain 1030 ofFIG. 1. Similarly, computing device 2040, mobile wallet application 2060and mobile wallet provider 2120 may be an example implementation ofcomputing device 1040, mobile wallet application 1060 and mobile walletprovider 1120 respectively of FIG. 1 in some examples. Computing device2050, mobile wallet application 2070 and mobile wallet provider 2130 maybe an example implementation of computing device 1050, mobile walletapplication 1070 and mobile wallet provider 1130 respectively of FIG. 1according to some examples.

A first mobile wallet application 2060 executing on a computing device2040 in a first mobile wallet domain 2010 is sending a message to asecond mobile wallet application 2070 executing on a second computingdevice 2050 in a second mobile wallet domain 2030. Mobile walletapplication 2060 may include a mobile wallet user agent (MUA) 2070 and akey manager 2080. The MUA 2075 allows users to compose, send andretrieve mobile wallet (MW) messages. Key manager 2080 may one or moreof: create, provision, register, store, and manage one or morecryptographic keys. Key manager 2080 may register (or obtain) a publickey with a certificate authority (not shown for clarity) and with a PKS2115.

A mobile wallet application 2060 may provide one or more graphical userinterfaces (GUI)s to allow users to compose and edit one or more mobilewallet messages. Before sending a message, the MUA 2075 requests therecipient's public key from the MTA 2100. The PKS 2115 and MTA 2100 maybe provided by the mobile wallet provider 2120 of the mobile walletdomain 2010. The PKS 2115 and MTA 2100 may be provided by the samecomputing device, or different computing devices. While the PKS 2115 andMTA 2100 are shown as part of the mobile wallet provider 2120, they maybe provided by separate entities. The MTA and PKS are accessible tocomputing device 2040 and other computing devices both within the mobilewallet domain 2010 and other devices within other mobile wallet domains,over one or more networks (not shown for clarity). These networks mayinclude one or more portions of: Local Area Networks (LAN), Wide AreaNetworks (WAN), Metropolitan Area Networks (MAN), the Internet, cellularnetworks, and the like.

The MTA 2100 first examines the message to determine which mobile walletdomain the recipient is in. If the mobile wallet domain is mobile walletdomain 2010, the MTA may retrieve the public key from the PKS 2115 ofmobile wallet domain 2010. If the mobile wallet domain is in anotherdomain, then the MTA checks its DNS cache to determine if it alreadyknows the IP address of the recipient mobile wallet domain's PKS. If themobile wallet domain is not in the DNS cache, the MW sends a lookupmessage to DNS server 2135 using the Domain Name System Protocol. DNSserver 2135 responds with an IP address of the mobile wallet domain (oran error). Once the address is determined (either through the cache orthe DNS server 2135), the MTA 2100 sends a message to the PKS 2170asking for the public key of the recipient mobile wallet (e.g., mobilewallet application 2070). The response includes the recipient's publickey. The public key is then passed by the MTA 2100 to the MUA 2075.

In some examples, the public key is passed to the MTA 2100 in the formof a digital certificate issued by a Certificate Authority (CA). Adigital certificate typically includes the name and other identificationinformation of the holder, the holder's public key, the name of the CA,a serial number, and a validity period. The information in the digitalcertificate is signed by the issuing CA using the issuing CA's privatekey. The signature can be verified using the CA's public key (which isknown and may be pre-installed on the computing devices). This may serveas a means to verify that the public key is owned by the recipient. Forexample, the PKS 2170 may provide a digital certificate created by atrusted CA for the recipient mobile wallet application 2070 in responseto the request for the recipient's public key. MUA 2075 (or MTA 2100)may utilize the CA's public key and decrypt the certificate. Thecertificate may then be checked to determine that the message was nottampered with, and that the public key therein belongs to the mobilewallet application 2070 (e.g., authentication and verification).

Once the MUA 2075 is satisfied with the public key, the MUA 2075 thenencrypts the contents of the message with the received public key andsends it to the MTA 2100. The MTA 2100 determines the IP Address of therecipient mobile wallet domain's MTA 2200. In some examples, the MTA2100 utilizes the IP Address previously determined from the DNS server(e.g., using the cache) when retrieving the public key of the recipient.For example, the PKS 2170 and MTA 2200 may have the same IP Address, orthe IP Address of the MTA 2200 may be derivable from the IP Address ofthe PKS 2170. In other examples a mobile wallet application in mobilewallet domain 2010 may have previously communicated with a mobile walletin mobile wallet domain 2030 (and thus the MTA 2100 still has the IPAddress in its cache). In other examples, the MTA 2100 may re-requestthe IP Address from the DNS server 2135.

The MTA 2100 then sends the message 2190 to the MTA 2200 of the mobilewallet provider 2130 of the recipient mobile wallet domain 2030 usingthe determined IP address. MTA 2200 may send a response to MTA 2100(which may be forwarded to MUA—but this message is not shown forclarity). MTA 2200 may then send the message to the mobile walletmessage storage agent (MSA) 2230. Note that the mobile wallet provider2120 may also employ a MSA, but it is not shown for clarity. MSA 2230may then store the message and alert the MUA 2260 of the recipientmobile wallet application 2070 using a notification. When the MUA isinterested in receiving the message, the MUA may request it and the MSAmay provide it. The MUA may decrypt the message using its private key.The private key may be maintained in the key manager 2290. Key manager2290 may communicate with key keeper 2300. Key keeper 2300 may be aremote key storage facility to prevent the loss of the cryptographickeys should the computing device 2050 experience a loss in data. Forexample, the key manager 2290 may store one or more keys of the mobilewallet application 2070 in the key keeper 2300.

In some examples, the mobile wallet application 2070 may utilize asecond cryptographic key to encrypt the private key. The private key maythen be stored with the mobile wallet provider 2130 in encrypted form.The second cryptographic key may then be stored with the key keeper 2300and utilized to decrypt the private key should the computing device 2050need it. The key keeper 2300 may be under control of the user ofcomputing device 2050. This ensures that the private key is not given tothe mobile wallet provider 2130 and thus the user can entrust that noone associated with the mobile wallet provider 2130 can access theirmessages. The key keeper 2300 may be a trusted entity by the mobilewallet 2070 which may be a service provider, a home computer of themobile wallet owner, a companion device of the computing device 2050(e.g., a smart watch that can be paired with a smartphone with mobilewallet), etc.

Turning now to FIG. 3, a message sequence chart showing a mobile walletcommunication is shown according to some examples of the presentdisclosure. Sender MUA 3010 sends a public key request 3080 to request arecipient mobile wallet's public key to the sender MTA 3020 in senderMUA 3010's mobile wallet domain. In this request the sender MUA 3010includes the address of the recipient mobile wallet (part of the addressis a mobile wallet domain name). The sender MTA 3020 may determine theInternet Protocol Address of the mobile wallet domain name using DNS3030 via request message 3090. Response 3100 from DNS 3030 includes theaddress of the recipient mobile wallet's domain. Sender MTA 3020 maythen cache this address for later use. In some examples, if the senderMTA 3020 already has the IP address of the recipient PKS 3040 from aprevious DNS request (e.g., in its DNS cache), messages 3090 and 3100may not be needed.

The sender MTA 3020 then uses this address to contact the recipientpublic key server (PKS) 3040 using message 3110 requesting the publickey of the recipient. The recipient PKS 3040 may reply with therecipient's public key using message 3120. As already noted the responsefrom the PKS 3040 may be a digital certificate issued by a trusted CA.

Sender MUA 3010 may then send a completed mobile wallet message 3160 tosender MTA 3020. This mobile wallet message may be encrypted by thesender MUA 3010 with the public key obtained at operation 3150. In someexamples, the message is not unencrypted until received by the recipientMUA—as such, the message is encrypted end-to-end. Sender MTA 3020 maythen pass this message 3170 to recipient MTA 3060 using the addressreceived from DNS 3030 in message 3100. In some examples, if the timeelapsed between the sender MUA 3010 requesting the public key of therecipient and the time between sending the message 3160 is too great,the sender MTA 3020's cache may have cleared and thus the sender MTA3020 may have to re-request the Internet Protocol (IP) Address of therecipient mobile wallet domain. In other examples, the IP Address of therecipient PKS 3040 and the recipient MTA 3060 may be different and thusthe sender MTA 3020 may have to make two separate DNS requests. In stillother examples, the IP Address of the recipient MTA 3060 and therecipient PKS 3040 may be derivable from each other, such that if thesender MTA 3020 knows the IP address of one, it may determine the IPaddress of the other without a DNS query.

Recipient MTA 3060 may respond with a confirmation 3180 that thismessage was received and the recipient is a valid recipient mobilewallet. Recipient MTA 3060 then passes the message 3190 to recipient MSA3070 for storage. Recipient MSA 3070 may acknowledge receipt of themessage 3190 with ack message 3200.

Continuing now to FIG. 4, the recipient MSA 3070 may send a message 4020notifying the recipient mobile wallet user agent (MUA) 4010 that amessage is waiting for the recipient MUA 4010. Recipient MUA 4010 mayacknowledge this notification with reply message 4030. When therecipient MUA 4010 wishes to retrieve this message, recipient MUA 4010may send a request message 4040 to the recipient MSA 3070 for themessage. Recipient MSA 3070 may then send a reply 4050 with the message.Recipient MUA 4010 may then utilize its private key to decrypt and readthe message. In some examples, rather than a notification, the recipientMUA 4010 may simply poll the recipient MSA 3070 periodically for newmessages. In yet other examples, the recipient MSA 3070 will immediatelydeliver the message to the MUA 4010 unless the MUA 4010 is offline, inwhich case the recipient MSA 3070 will store the message until the MUA4010 is back online (at which point it will deliver the message to theMUA 4010).

FIG. 5 shows a flowchart of a method 5000 of a MUA sending a mobilewallet message according to some examples of the present disclosure. Atoperation 5010 the MUA receives a request to send a message. Forexample, a user utilizing a Graphical User Interface (GUI) provided by amobile wallet application may request to send a message. For example,the user presses a “compose” button and enters a recipient's mobilewallet address and presses a “send” button. At operation 5020, the MUAdetermines the recipient(s) of the message and sends a request for thepublic key of the recipient(s) to the MTA of the user's current mobilewallet domain. At operation 5030, the MUA receives the public keys.These public keys may be cached or stored to avoid future calls to theMTA in future messages. In some examples, the public keys may bereceived as a digital certificate signed by a trusted CA. The MUA mayattempt to verify the digital certificate and if the verification issuccessful, processing may continue, otherwise, processing may terminateand the user may be notified of the unsuccessful verification.

At operation 5040 the MUA may receive the message contents of the mobilewallet to mobile wallet message. At operation 5050 the MUA may encryptthe message using the public key received at operation 5030. Atoperation 5060, the MUA may send the encrypted message to the MTA. Insome examples, the MTA may respond to the MUA and the MUA may retransmitthe message if it did not receive the acknowledgement from the MTA. Ifthere are multiple recipients of the mobile wallet message, the messagemay be encrypted and sent separately for each recipient.

FIG. 6 shows a flowchart of a method 6000 of a MTA requesting a publickey of a recipient mobile wallet according to some examples of thepresent disclosure. At operation 6010 the MTA may receive a request fora public key of a recipient from an MUA. At operation 6020 the MTA maycontact a Domain Name Server (DNS) for the IP address of the Public KeyServer (PKS) of the recipient mobile wallet domain. At operation 6030the MTA sends a request to the PKS of the recipient's mobile walletdomain. At operation 6040 the MTA receives the public key from the PKS.At operation 6050 the MTA sends this public key to the MUA.

In some examples, the MTA may cache or otherwise store DNS responses. Ifthe MTA already has the IP address of the recipient mobile walletdomain's PKS, operations 6020 and 6030 may be omitted. Additionally, themethod shown is utilized to retrieve a key for a remote mobile walletdomain. If the recipient is in the same mobile wallet domain as thesender (and also the MTA), then operations 6020 and 6030 are also notneeded, and the PKS in operation 6030 is the local mobile walletdomain's PKS. Furthermore, the MTA may also cache public keys ofrecipient devices so as to instantly provide these keys to requestingMUAs in their mobile wallet domain. If the public key is cached (and thecache is not expired), then operations 6020-6040 are not necessary.

FIG. 7 shows a flowchart of a method 7000 of a MTA sending a message toanother MTA according to some examples of the present disclosure. Atoperation 7010 the MTA may receive a completed message for sending toanother mobile wallet. This message may be encrypted, however, theheader identifies its destination. If the message is to another mobilewallet in the same mobile wallet domain, the MTA delivers the message tothe message storage agent of the mobile wallet domain at operation 7025.Otherwise, at operation 7020, the MTA may contact the DNS server for theIP address of the recipient MTA. In some examples, if the MUA previouslyrequested the public key, it's possible that the DNS record is cachedand this operation is not needed. At operation 7030 the IP address isreceived. At operation 7040, the message is sent to the IP addressreceived at operation 7030. In some examples, the message may be sentusing standard Internet protocols such as Internet Protocol (IP),Transmission Control Protocol (TCP), HyperText Transfer Protocol (HTTP),Simple Mail Transfer Protocol (SMTP), and the like.

FIG. 8 shows a flowchart of a method 8000 of an MTA receiving a messagesent by another MTA according to some examples of the presentdisclosure. At operation 8010 the MTA receives the message from thesender MTA. At this point the MTA may verify that the intended recipientis registered with the mobile wallet domain and is a proper recipient.If the MTA is a proper recipient, then at operation 8020 the message issent to the recipient MSA for storage.

FIG. 9 shows a flowchart of a method 9000 of a recipient MSA receiving amessage according to some examples of the present disclosure. Atoperation 9010 an MTA sends the MSA a message destined for a mobilewallet in the MSA's mobile wallet domain. The MSA stores the message atoperation 9020. This may be a storage device, a database, or the like.At operation 9030 the recipient MUA of the recipient's computing deviceis notified. For example, the MUA may register its address with the MSAto be notified of new communications. The notification may be a messagesent over a network to the MUA. The MUA may then respond by downloadingthe message. At operation 9040 the MUA may request the message. Thisrequest may include one or more verifications to ensure that only therecipient MUA is allowed to access the message. At operation 9050 themessage is sent to the recipient MUA. In some examples, once the messageis delivered the message may be deleted from storage. In other examples,the message may be retained for later downloading.

Turning now to FIG. 10, a flowchart of a method 10000 of a recipient MUAreceiving a message is shown according to some examples of the presentdisclosure. At operation 10010 the recipient MUA may receive anotification from the MSA in its mobile wallet domain. At operation10020 the MUA may request the message from the MSA. Operation 10020 mayhappen much later than the receipt of the notification at operation10010. For example, the MUA may wait for a user to indicate that theyare interested in viewing the message before retrieving it. At operation10030 the message may be received from the MSA. At operation 10040, theprivate key of the MUA is retrieved. The private key may be stored bythe MUA, or may be in the key keeper. At operation 10050 the message maybe decrypted. This may also happen later. For example, the MUA maydownload the message immediately, but store it encrypted on thecomputing device of the user. In some examples, the MUA may only decryptthe message upon receiving a request to view the message by the user.This may protect the message by storing it encrypted. At operation 10060the message may be displayed to a user, such as in a GUI provided by themobile wallet application. In other examples, the message may triggerone or more payments, deductions from balances, or other actions.

Public and private keys for a mobile wallet used by the presentdisclosure may be generated by a key manager component of the mobilewallet application. In these examples the public key is thencommunicated to the public key server provided by the mobile walletprovider for distribution to other mobile wallets. In some examples, theprivate key may be encrypted by another cryptographic key from anothercryptographic key pair and stored with the mobile wallet domainadministrator. This allows for a backup of the private key withoutallowing the mobile wallet domain administrator access to the key (andthus access to the mobile wallet messages). The key used to unlock thefirst private key may be stored in the mobile wallet application. Forreliability, in case the mobile wallet application is erased (e.g., afailure of the computing device it is run on), the mobile wallet maystore this key in a key keeper, such as key keeper 2300 of FIG. 2. Keykeeper 2300 may be an application on another computing device of theuser, a network based application, or the like, which may not be themobile wallet provider. The transmissions of the keys to the key keepermay be protected through one or more mechanisms such as secure socketlayer (SSL) communications and may be protected from unauthorized accessthrough mechanisms such as username and password and two factorauthentication. If the mobile wallet loses keys due to device failure ordevice replacement, it retrieves the second cryptographic key from thekey keeper and the encrypted private key from the administrator. Thedevice then recovers the private key by decrypting it using the secondcryptographic key.

In some examples, the recipient may verify the identity of the sendingmobile wallet. This may be important to maintaining security whenprocessing financial transactions electronically without humanintervention. For instance, the recipient mobile wallet may receive amonthly electric bill from a power company and may verify authenticityof the bill by verifying the sender of the bill before making a paymentautomatically. In some examples, the sender may sign the message with adigital signature. For example, the message is hashed and the hash valueis then encrypted with the sender's private key. The sender's public keyis then used by the recipient (after having been obtained by therecipient's MTA) to verify the hash of the message. This verifies thatthe message is from the sender. However, in other examples, anadditional verification may be sent. For example, non-public detailsabout the recipient's account may also be sent to provide the recipientwith an assurance that the message is genuine. Using these twotechniques the recipient may be assured of the sender's legitimacy.

FIG. 11 shows an example message sequence chart 11000 of a recipient MTAverifying the authenticity of the sender. This flow may happen after theMTA receives the message. First the recipient MTA may identify thesender name in the message. Recipient MTA 11020 may send a DNS lookuprequest 11060 for the sender name identified in the message to DNS 11030to obtain the IP address of the senders PKS. At operation 11070 the DNSserver 11030 responds with the IP address (or an error if the mobilewallet domain was not found—in which case the flow ends). If the IPaddress of the message sender is different from the IP address of thesender identified in the message, the message may be from a fraudulentsender. For instance, suppose the sender is an imposter of Wells Fargo.When the recipient performs DNS lookup of Wells Fargo, the IP address ofWells Fargo would be different from the imposter's IP address. In otherexamples, the IP address may be deducible from the received message(e.g., from analysis of IP-packet or mobile wallet message headers) andmessages 11060 and 11070 may not be necessary.

The recipient MTA 11020 may then send a request for the public key ofthe sender from the sender's PKS using message 11080. The sender PKS11040 may then reply 11090 with the public key. In some examples, thepublic key provided may be as part of a digital certificate issued by atrusted certificate authority.

Once the recipient MTA 11020 receives the sender's public key, therecipient MTA 11020 may verify the certificate (e.g., if the public keywas provided as a digital certificate), decrypt the signature, calculatethe message hash and compare the decrypted signature hash with thecalculated message hash. If the hashes match, then the message was sentby the sender. If the hashes do not match, it is possible that thesender did not send the message. Message 11120 may be an indication ofwhether the sender is legitimate. Message 11130 may acknowledge message11120.

In other examples, the verification is done by the recipient MUA 11010.In these examples message 11120 is the digital certificate or publickey. The recipient MUA 11010 may verify the certificate (e.g., if thepublic key was provided as a digital certificate), decrypt thesignature, calculate the message hash and compare the decryptedsignature hash with the calculated message hash. If the hashes match,then the message was sent by the sender. If the hashes do not match, itis possible that the sender did not send the message. In either case,the recipient MUA 11010 may inform the user on the results of theverification.

Turning now to FIG. 12, a flowchart of a method 12000 for verifying thesender of a mobile wallet message is shown according to some examples ofthe present disclosure. At operation 12010 the recipient's MTA mayrequest the IP of the sender's PKS. At operation 12020 the recipient'sMTA may receive the IP of the sender's PKS. As noted previously, the DNSlookup may not be necessary if the IP Address is available from theoriginal message or from other sources (e.g., a cache).

At operation 12030 the recipient's MTA may request the sender's publickey from the PKS of the sender. At operation 12040 the MTA may receivethe public key. Also as previously noted, the public key may be in theform of a digital certificate issued by a trusted certificate authority.

Operations 12050-12090 may be performed by either the MTA of therecipient, or the recipient MUA. In some examples, before operations12050-12090, the public key of the sending MUA may be verified byverifying the digital certificate using the public key of thecertificate authority that issued the digital certificate, by verifyingit has not expired, and verifying that the identity of the user is asstated by the sender.

At operation 12050 the signature of the message may be decrypted. Atoperation 12060 a cryptographic hash value of the message may becomputed using a cryptographic hash function. The sender had calculatedthe cryptographic hash utilizing the same hashing function, encrypted itwith its private key (which only the sender has, and only the validpublic key can decrypt) as the signature, and sent it to the recipient.If the signature is decrypted with the public key and matches thecorrect cryptographic hash, then the recipient can be assured that themessage came from the person holding the private key matching the publickey registered with the PKS and verified by the CA. Examplecryptographic hash functions include MD5, SHA-1, SHA-2, SHA-3, BLAKE,BLAKE2, and the like. At operation 12070 if the hash in the messagematches the computed hash value, then at operation 12090 the MTA maynotify the MUA that the message is authentic. At operation 12080, if thehash in the message does not match the computed hash value, then the MTAmay inform the MUA that the message is not authentic (and may beconsidered suspicious).

While the above procedure ensures that the entity that sent the messagealso knows the private key of the public key associated with the entity,it is possible that the private key was compromised. In order to addanother layer of security, in some examples an application layersecurity mechanism may be added. In this layer, the MUA of the recipientmay require the MUA of the sender to provide certain verificationinformation. For example, the MUA of recipient may request informationknown to both the MUA of the sender and MUA of the recipient. If the MUAof the sender provides this information (in either the original message,or as part of a challenge response sequence) and it is correct, the MUAof the recipient may determine that the sender is legitimate. Exampleinformation may include one or more of: bank account information(account numbers, balances, account holder personal information such asname, address, phone number), transaction information (e.g., transactiondates, amounts, parties), driver's license information, userinformation, and a secret phrase (e.g., a predetermined data field). Theinformation requested may be standardized, such that the sender mayprovide this information as part of the message; or may be requested bythe MUA of the recipient.

Both levels of verification (e.g., verifying the signature of thesender, as well as application-layer verifications) may be performedautomatically, or may be performed at the request of the recipient. Insome examples, certain types of messages (e.g., certain mobile walletmessages such as transactions) may automatically trigger one or both ofthe verification layers. In some examples, a table may indicate whetherno verification, signature verification, application layer verification,or both signature and application layer verification is to be performedbased upon one or more of: the type of mobile wallet message, a textcontent of the mobile wallet message, a sender of the mobile walletmessage, or the like.

Mobile wallets may use alternative security scheme in some cases tomaintain the integrity of transmitted messages. For instance, a sendermobile wallet may discover that there is no public key published by therecipient mobile wallet in the process of DNS lookup. The sender maystill want to send a message with some protection against theman-in-the-middle attack. FIGS. 13-15 illustrate an example of asecurity scheme for securing messages transmitted between mobilewallets, according to some embodiments.

FIG. 13 shows an example message sequence chart 13000 of a securedtransmission of a mobile wallet message from a sender to a recipient. Afirst mobile wallet (sender) 13180 may compose a transactional message13010 and may divide it into a first transaction unit 13020 and a secondtransaction unit 13030. The first transaction unit 13020 may include afirst half of the transactional message and the second transaction unit13030 may include a second half of the message. In an example, the firsttransaction unit 13020 may include odd lines of the transactionalmessage 130101 and the second transaction unit 13030 may include evenlines of the transactional message 130101. It will be recognized thatthe transactional message 13010 may be divided in a variety of otherways.

The first mobile wallet 13180 may create two different cryptographickeys and may encrypt the first transaction unit 13020 with a first key13070 to produce a first encrypted unit 13040 and may encrypt the secondtransaction unit 13030 with a second key 13050 and may produce a secondencrypted unit 13060. The first mobile wallet 13180 may produce a firstpacket by combining the first encrypted unit 13040 and the second key13050 and may produce a second packet by combining the second encryptedunit 13060 and the first key 13070. Each packet may specify therelationship with the other packet. The first mobile wallet 13180 maytransmit the first packet using a first communication path 13080 and maytransmit the second packet using a second communication path 13090. Thefirst communication path 13080 is different from the secondcommunication path 13090. For example, the first communication path13080 and the second communication path 13090 may operate on twodifferent wireless media or two different underlying networks (e.g.,separate network backbones, etc.). For example, the first communicationpath 13080 may be a cellular network and the second communication path13090 may be a Wi-Fi network. In another example, the firstcommunication path 13080 may be a telephone company network and thesecond communication path 13090 may be the Internet.

The second mobile wallet (recipient) 13190 may receive the first packetvia the first communication path 13080 and the second packet via thesecond communication path 13090. The second mobile wallet 13190 maydecrypt the first encrypted unit 13100 included in the first packetusing the first cryptographic key 13130 and may decrypt the secondencrypted unit 13120 included in the second packet using second key13110 and may produce a first transaction unit 13140 and a secondtransaction unit 13150 and may combine the first transaction unit 13140and the second transaction unit 13150 into a transactional message13160.

In some examples, the first mobile wallet 13180 may divide thetransactional message 13010 into more than two units, encrypt each unitusing a different cryptographic key for each unit, and send each dataunit over two or more communication paths at different time intervals.In an example, each unit may be numbered or their relationships may bedefined to enable recombination.

If one of the packets is lost on the way, the second mobile wallet 13190may transmit a request to the first mobile wallet 13180 to retransmitthe data packets. In an example, the first mobile wallet 13180 may use adifferent division technique and may use different encryption keys fromthe first attempt to insure the security of the second attempt.

A recipient may receive a first encrypted segment of the transactionalmessage and may need a cryptographic key included in a packet with asecond encrypted segment of the transactional message. Because eachsegment is encrypted with a key included in another segment and eachsegment is transmitted over a different communication path at adifferent time interval, the likelihood of the message being interceptedor compromised (e.g., via a man-in-the-middle attack, etc.) may bereduced.

FIG. 14 shows a flowchart of a method 14000 for securing mobile walletmessage transmissions between a sender and a recipient according to someexamples of the present disclosure.

At operation 14005, a first mobile wallet (e.g., mobile walletapplication 2060 as described in FIG. 2) may divide a transactionalmessage into a first transaction unit and a second transaction unit. Inan example, the first mobile wallet may determine a first half and asecond half of the transactional message and may include the first halfin the first transaction unit and may include the second half in thesecond transaction unit. In another example, the first mobile wallet mayextract odd lines and even lines from the transactional message and mayinclude the odd lines in the first transaction unit and may include theeven line in the second transaction unit.

At operation 14010, the first mobile wallet may generate (e.g., usingthe key manager 2080 as described in FIG. 2) a first cryptographic keyand a second cryptographic key. In an example, the first cryptographickey and the second cryptographic key may be different.

At operation 14015, the first mobile wallet may encrypt (e.g., using theMUA 2075 as described in FIG. 2) the first transaction unit using thesecond cryptographic key and the second transaction unit using the firstcryptographic key.

At operation 14020, the first mobile wallet may create (e.g., using theMUA 2075 as described in FIG. 2) a first data packet including theencrypted first transaction unit and the second cryptographic key and asecond data packet including the encrypted second transaction unit andthe first cryptographic key. In an example, the first data packet mayinclude a reference to the second data packet and the second data packetmay include a reference to the first data packet.

At operation 14025, the first mobile wallet may transmit (e.g., usingthe MUA 2075 as described in FIG. 2) the first data packet over a firsttransmission path and the second data packet over a second transmissionpath. In an example, the first transmission path may use a firstwireless protocol and the second transmission path may use a secondwireless protocol. In another example, the first transmission path mayuse a first physical network and the second transmission path may use asecond physical network. In another example, the first transmission pathmay use a cellular network and the second communication path may use aWi-Fi network. In another example, the first communication path may usea telephone company network and the second transmission path may use aninternet connection.

In some examples, the first mobile wallet may receive a request from asecond mobile wallet (e.g., mobile wallet application 2070 as describedin FIG. 2) indicating that one of the first data packet and the seconddata packet was not received. The first mobile wallet may retransmit thefirst data packet and the second data packet in response to the request.In an example, the first mobile wallet may generate a thirdcryptographic key and a fourth cryptographic key and may encrypt thefirst transaction unit using the fourth cryptographic key and the secondtransaction unit using the third cryptographic key before retransmittingthe first data packet and the second data packet.

FIG. 15 shows a flowchart of a method 15000 for securing mobile walletmessage transmissions between a recipient and a sender according to someexamples of the present disclosure.

At operation 15005, a mobile wallet user agent (MUA) of second mobilewallet (e.g., the MUA 2260 of mobile wallet application 2070 asdescribed in FIG. 2) may receive a first data packet over a firsttransmission path and a second data packet over a second transmissionpath, the first data packet including a first encrypted transaction unitand a second cryptographic key and the second data packet including asecond encrypted transaction unit and a first cryptographic key. In anexample, the first data packet may include a reference to the seconddata packet and the second data packet may include a reference to thefirst data packet. In an example, the first transmission path may use afirst wireless protocol and the second transmission path may use asecond wireless protocol. In another example, the first transmissionpath may use a first physical network and the second transmission pathmay use a second physical network. In another example, the firsttransmission path may uses a cellular network and the secondcommunication path may use a Wi-Fi network. In another example, thefirst communication path may use a telephone company network and thesecond transmission path may use an internet connection.

At operation 15010, the MUA may decrypt (e.g., using the key manager2290 as described in FIG. 2, etc.) the first encrypted transaction unitusing the second cryptographic key and the second encrypted transactionunit using the first cryptographic key.

At operation 15015, the MUA may combine the first decrypted transactionunit and the second decrypted transaction unit into a transactionalmessage.

At operation 15020, the MUA may forward the transactional message to thesecond mobile wallet for further processing.

In some examples, the MUA may determine that only one data packet of thefirst data packet and the second data packet has been received. The MUAmay transmit a request to resend the first data packet and the seconddata packet to a sender (e.g., mobile wallet application 2060 asdescribed in FIG. 2) of the only data packet. The MUA may receive thefirst data packet and the second data packet in response to the request.

FIG. 16 illustrates a schematic of a logical diagram of a user computingdevice 16010 according to some examples of the present disclosure. Forexample, user computing device 16010 may, in some examples, be anembodiment of computing devices 1040, 1050, 2040, and 2050. Usercomputing device 16010 may implement a sender MUA 3010, a recipient MUA4010, or a recipient MUA 11010. User computing device 16010 mayimplement FIGS. 5, 10, and portions of FIGS. 12, 14, and 15. Usercomputing device 16010 may be a desktop computer, laptop computer,tablet computer, mobile phone, smartphone, computer server, or wearable.User computing device may have a hardware layer 16006 including displayinterface 16130, network interface 16110, user input device interface(s)16115, and data storage 16090. User computing device 16010 may have anoperating system layer 16004 with one or more operating system(s) suchas operating system 16050. Operating system 16050 may have, among othermodules, an input module 16070, a network module 16072, a display module16085, and a storage controller module 16087. User computing device mayhave an application layer 16002. Application layer 16002 may have manyapplications, but as shown, application layer includes a mobile walletapplication 16020. User computing device may have other layers (such asa Basic Input and Output System (BIOS), Unified Extensible FirmwareInterface (UEFI), Firmware layer), and the like which are not shown forclarity.

Included in mobile wallet application 16020 is MUA module 16032 whichimplements the mobile wallet user agent, such as MUA 2075, 2260, 3010,4010, 11010, and implements the methods of FIGS. 5, 10, and all of, orportions of FIG. 12. MUA module 16032 may provide one or more graphicaluser interfaces for creating, editing, sending, or reading mobile walletmessages. MUA module 16032 may also provide for communicating with oneor more MTA's to obtain encryption keys of recipient mobile wallets,encrypting one or more messages with obtained encryption keys, sendingone or more messages (e.g., encrypted messages) to the one or moreMTA's, receiving notifications that one or more messages sent to the MUAare available at an MSA, retrieving the one or more messages from theMSA, decrypting the one or more messages, managing the public andprivate keys of the mobile wallet, and the like. MUA module 16032 mayinterface with the GUI module 16030 to provide one or more GUIs tofacilitate the mobile wallet messaging. MUA module 16032 may alsointerface with the input module 16070 of operating system 16050 toreceive user input from devices connected to the user computing device16010 through user input device interface(s) 16115 and with displaymodule 16085 to provide output to the user through display interface16130 in providing these GUIs.

Mobile Wallet Application (MWA) module 16034 provides for storing,managing, and using items in the mobile wallet. For example, MWA module16034 may, upon input from the user, transmit one or more paymentauthorizations to other devices, transmit identification information toother users, store, modify, or delete items in a user's wallet, and thelike. MWA module 16034 may also work with GUI module 16030 to provideone or more GUIs to facilitate the management of the mobile wallet byinterfacing with the input module 16070 and display module 16085.

Also included in mobile wallet applications 16020 is a GUI module 16030which, as noted, may work with display module 16085, input module 16070,MUA module 16032, and MWA module 16034 to provide one or more GUIs forallowing users to use their mobile wallet and to send messages from andreceive messages to their mobile wallets. For example, GUI module 16030may allow users to view representations of the contents of their mobilewallets, edit their mobile wallets, add items, remove items, modifyitems, use items (e.g., for payment, for identification, and the like),and send and receive messages to and from other mobile wallets. Keymanager module 16036 may obtain, store, and manage one or morecryptographic keys or key pairs. Key manager module 16036 may be anembodiment of key manager 2080 and 2290. Key manager module 16036 maywork with the storage controller 16087 to store keys in the data storage16090. Key manager module 16036 may also work with storage controllermodule 16087 to obtain keys, certificates, or other cryptographic itemsfrom one or more remote servers.

Operating system layer 16004 provides one or more services to theapplication layer 16002 and manages hardware in the hardware layer16006. Example tasks performed by the operating system layer 16004includes providing one or more device drivers which manages hardware andprovides one or more interfaces for applications in the applicationlayer 16002 to utilize the hardware in the hardware layer 16006. Othertasks performed by the operating system layer 16004 include memorymanagement, task scheduling, resource management, optimizations,security, and other tasks.

Input module 16070 is a device driver that manages user input deviceinterface(s) 16115 and provides input sensed by devices connected to theuser input device interface(s) 16115 to interested modules in theoperating system layer 16004 and interested applications in theapplication layer 16002. Display module 16085 is a device driver thatmanages display interface 16130 and provides modules in the operatingsystem layer 16004 and applications in application layer 16002 access todisplays connected to the display interface 16130. Storage controllermodule 16087 is a device driver that manages data storage 16090 andprovides modules in the operating system layer 16004 and applications inapplication layer 16002 access to store and retrieve data in datastorage 16090. For example, storage controller module 16087 may providemobile wallet application(s) 16020 with access to data storage 16090 forstoring messages, storing cryptographic keys (e.g., key manager 16036may store keys for the user of mobile wallet application(s) or may cacheone or more public keys of other mobile wallet users to avoid asking theMTA for keys, and the like), etc.

Network module 16072 is a device driver for the network interface 16110.Network module 16072 may manage network interface 16110 and providenetwork access to modules in the operating system layer 16004 andapplication layer 16002. Network module 16072 may implement one or morenetwork protocols, such as Transmission Control Protocol (TCP), InternetProtocol (IP), 802 series protocols promulgated by the Institute ofElectrical and Electronics Engineers (IEEE) including 802.11 protocolsand 802.3 protocols, cellular protocols such as those promulgated by theThird Generation Partnership Project (3GPP) including Long TermEvolution (LTE) protocols and Long Term Evolution-Advanced (LTE-A)protocols, and others.

Data storage 16090 may be any type of non-transitory storage, such asRandom Access Memory (RAM), Solid State Drives (SSD), Hard Disk Drivers(HDD), magnetic storage, and optical storage. Display interface 16130may be graphics hardware that connects to a Cathode Ray Tube (CRT), aLiquid Crystal Display (LCD), a Light Emitting Diode (LED) display, anOrganic LED display, or the like. Display interface 16130 may be coupledto one or more user input devices to form a touch screen display. Userinput device interface(s) 16115 may be any interface to a user inputdevice. Examples include Universal Serial Bus (USB), Serial ATA (SATA),Peripheral Component Interconnect Express (PCI-E), and the like. Inputdevices that may connect to the user input device interface(s) 16115 mayinclude touch sensors (e.g., in a touch screen display), a keyboard, amouse, a trackpad, a touchpad, and the like. Network interface 16110 mayprovide user computing device 16010 with access to one or more computernetworks. Network interface 16110 may be an Ethernet card, a WirelessLocal Area Network (WLAN) card, a Radio Frequency Transmitter, or thelike.

FIG. 17 illustrates a schematic of a mobile wallet domain computingdevice 17010 according to some examples of the present disclosure.Mobile wallet domain computing device 17010 may perform the role of oneor more of: MTA, PKS, and MSA. For example, one mobile wallet domaincomputing device 17010 may perform all of these roles, or multiplemobile wallet domain computing devices 17010 may perform these roles.Mobile wallet domain computing device 17010 may be an example ofprovider 1120, 1130 mobile wallet element issuer 1160, mobile walletproviders 2110, 2210, sender MTA 3020, recipient PKS 3040, recipient MTA3060, recipient MSA 3070, recipient MTA 11020, sender PKS 11040, and thelike. Mobile wallet domain computing device 17010 may perform themethods of one or more of FIGS. 6, 7, 8, 9, and portions or all of FIGS.12, 14, and 15.

Mobile wallet domain computing device 17010 may be a desktop computer,laptop computer, tablet computer, mobile phone, smartphone, computerserver, or wearable. Mobile wallet domain computing device may have ahardware layer 17006 including display interface 17130, networkinterface 17110, user input device interface(s) 17115, and data storage17090. Mobile wallet domain computing device 17010 may have an operatingsystem layer 17004 with one or more operating system(s) such asoperating system 17050. Operating system 17050 may have, among othermodules, an input module 17070, a network module 17072, a display module17085, and a storage controller module 17087. Mobile wallet domaincomputing device may have an application layer 17002. Application layer17002 may have many applications, but as shown, application layerincludes mobile wallet domain applications 17020.

Included in mobile wallet domain application(s) 17020 is MTA module17032 which may determine one or more public keys of one or morerecipient mobile wallet applications, determine IP addresses of one ormore recipient mobile wallet domain PKS' and MTAs, forward one or moremobile wallet messages to one or more other MTAs, and receive one ormore mobile wallet messages from other MTAs where a mobile walletapplication within the mobile wallet domain as the MTA is the recipient.MTA module 17032 may be an example implementation of MTA module 2100,2200, 3020, 3060, 11020 and may implement FIGS. 6, 7, 8, and portions ofFIGS. 12, 14, and 15.

Mobile wallet domain application(s) 17020 may also include PKS module17034 which may manage and provide one or more public keys of mobilewallet users within the mobile wallet domain. PKS module 17034 maystore, manage, and distribute public keys of mobile wallet applicationswithin its mobile wallet domain. PKS module may be one exampleembodiment of PKS 2115, 2170, 3040, 11040, and may implement operationsto receive a request from a MTA, the request including an address,determine from the address whether there is a public key matching theaddress stored in the PKS, and if there is a matching public key, sendthe public key back to the requesting MTA. If there is not a matchingpublic key, send an error back to the requesting MTA.

Mobile wallet domain application(s) 17020 may also include an MSA module17036. The MSA module 17036 may be an example embodiment of MSA 2230,3070 and may perform the operations of FIG. 9. GUI module 17030 providesone or more GUIs and other user interfaces to users to provide foradministration of the mobile wallet domain applications. GUI module17030 may work with the display module 17085 of the operating system toprovide a GUI for output on a display connected to display interface17130.

Operating system layer 17004 provides one or more services to theapplication layer 17002 and manages hardware in the hardware layer17006. Example tasks performed by the operating system layer 17004includes providing one or more device drivers which manages hardware andprovides one or more interfaces for applications in the applicationlayer 17002 to utilize the hardware in the hardware layer 17006. Othertasks performed by the operating system layer 17004 include memorymanagement, task scheduling, resource management, optimizations,security, and other tasks.

Input module 17070 is a device driver that manages user input deviceinterface(s) 17115 and provides input sensed by devices connected to theuser input device interface(s) 17115 to interested modules in theoperating system layer 17004 and interested applications in theapplication layer 16002. Display module 17085 is a device driver thatmanages display interface 17130 and provides modules in the operatingsystem layer 17004 and applications in application layer 17002 access todisplays connected to display interface 17130. Storage controller module17087 is a device driver that manages data storage 17090 and providesmodules in the operating system layer 17004 and applications inapplication layer 17002 access to store and retrieve data in datastorage 17090.

Network module 17072 is a device driver for the network interface 17110.Network module 17072 may manage network interface 17110 and providenetwork access to modules in the operating system layer 17004 andapplication layer 17002. Network module 17072 may implement one or morenetwork protocols, such as Transmission Control Protocol (TCP), InternetProtocol (IP), 802 series protocols promulgated by the Institute ofElectrical and Electronics Engineers (IEEE) including 802.11 protocolsand 802.3 protocols, cellular protocols such as those promulgated by theThird Generation Partnership Project (3GPP) including Long TermEvolution (LTE) protocols and Long Term Evolution-Advanced (LTE-A)protocols, and others.

Data storage 17090 may be any type of non-transitory storage, such asRandom Access Memory (RAM), Solid State Drives (SSD), Hard Disk Drivers(HDD), magnetic storage, and optical storage. Display interface 17130may be graphics hardware that connects to a Cathode Ray Tube (CRT), aLiquid Crystal Display (LCD), a Light Emitting Diode (LED) display, anOrganic LED display, or the like. Display interface 17130 may be coupledto one or more user input devices to form a touch screen display. Userinput device interface(s) 17115 may be any interface to a user inputdevice. Examples include Universal Serial Bus (USB), Serial ATA (SATA),Peripheral Component Interconnect Express (PCI-E), and the like. Inputdevices that may connect to the user input device interface(s) 17115 mayinclude touch sensors (e.g., in a touch screen display), a keyboard, amouse, a trackpad, a touchpad, and the like. Network interface 17110 mayprovide mobile wallet domain computing device 17010 with access to oneor more computer networks. Network interface 17110 may be an Ethernetcard, a Wireless Local Area Network (WLAN) card, a Radio FrequencyTransmitter, or the like.

FIG. 18 illustrates a block diagram of an example machine 18000 uponwhich any one or more of the techniques (e.g., methodologies) discussedherein may perform. In alternative embodiments, the machine 18000 mayoperate as a standalone device or may be connected (e.g., networked) toother machines. In a networked deployment, the machine 18000 may operatein the capacity of a server machine, a client machine, or both inserver-client network environments. In an example, the machine 18000 mayact as a peer machine in peer-to-peer (P2P) (or other distributed)network environment. The machine 18000 may be a personal computer (PC),a tablet PC, a set-top box (STB), a personal digital assistant (PDA), amobile telephone, a smart phone, a web appliance, a network router,switch or bridge, or any machine capable of executing instructions(sequential or otherwise) that specify actions to be taken by thatmachine. Machine 18000 may function as an MUA, MTA, computing deviceexecuting a mobile wallet application, DNS, CA, PKS, Key Manager, KeyKeeper, or the like. For example, the Machine 18000 may be configured toperform any of the operations of FIGS. 5-10, 12, and 14. Further, whileonly a single machine is illustrated, the term “machine” shall also betaken to include any collection of machines that individually or jointlyexecute a set (or multiple sets) of instructions to perform any one ormore of the methodologies discussed herein, such as cloud computing,software as a service (SaaS), other computer cluster configurations.

Examples, as described herein, may include, or may operate on, logic ora number of components, modules, or mechanisms. Modules are tangibleentities (e.g., hardware) capable of performing specified operations andmay be configured or arranged in a certain manner. In an example,circuits may be arranged (e.g., internally or with respect to externalentities such as other circuits) in a specified manner as a module. Inan example, the whole or part of one or more computer systems (e.g., astandalone, client or server computer system) or one or more hardwareprocessors may be configured by firmware or software (e.g.,instructions, an application portion, or an application) as a modulethat operates to perform specified operations. In an example, thesoftware may reside on a machine readable medium. In an example, thesoftware, when executed by the underlying hardware of the module, causesthe hardware to perform the specified operations.

Accordingly, the term “module” is understood to encompass a tangibleentity, be that an entity that is physically constructed, specificallyconfigured (e.g., hardwired), or temporarily (e.g., transitorily)configured (e.g., programmed) to operate in a specified manner or toperform part or all of any operation described herein. Consideringexamples in which modules are temporarily configured, each of themodules need not be instantiated at any one moment in time. For example,where the modules comprise a general-purpose hardware processorconfigured using software, the general-purpose hardware processor may beconfigured as respective different modules at different times. Softwaremay accordingly configure a hardware processor, for example, toconstitute a particular module at one instance of time and to constitutea different module at a different instance of time.

Machine (e.g., computer system) 18000 may include a hardware processor18002 (e.g., a central processing unit (CPU), a graphics processing unit(GPU), a hardware processor core, or any combination thereof), a mainmemory 18004 and a static memory 18006, some or all of which maycommunicate with each other via an interlink (e.g., bus) 18008. Themachine 18000 may further include a display unit 18010, an alphanumericinput device 18012 (e.g., a keyboard), and a user interface (UI)navigation device 18014 (e.g., a mouse). In an example, the display unit18010, input device 18012 and UI navigation device 18014 may be a touchscreen display. The machine 18000 may additionally include a storagedevice (e.g., drive unit) 18016, a signal generation device 18018 (e.g.,a speaker), a network interface device 18020, and one or more sensors18021, such as a global positioning system (GPS) sensor, compass,accelerometer, or other sensor. The machine 18000 may include an outputcontroller 18028, such as a serial (e.g., universal serial bus (USB),parallel, or other wired or wireless (e.g., infrared(IR), near fieldcommunication (NFC), etc.) connection to communicate or control one ormore peripheral devices (e.g., a printer, card reader, etc.).

The storage device 18016 may include a machine readable medium 18022 onwhich is stored one or more sets of data structures or instructions18024 (e.g., software) embodying or utilized by any one or more of thetechniques or functions described herein. The instructions 18024 mayalso reside, completely or at least partially, within the main memory18004, within static memory 18006, or within the hardware processor18002 during execution thereof by the machine 18000. In an example, oneor any combination of the hardware processor 18002, the main memory18004, the static memory 18006, or the storage device 18016 mayconstitute machine readable media.

While the machine readable medium 18022 is illustrated as a singlemedium, the term “machine readable medium” may include a single mediumor multiple media (e.g., a centralized or distributed database, and/orassociated caches and servers) configured to store the one or moreinstructions 18024.

The term “machine readable medium” may include any medium that iscapable of storing, encoding, or carrying instructions for execution bythe machine 18000 and that cause the machine 18000 to perform any one ormore of the techniques of the present disclosure, or that is capable ofstoring, encoding or carrying data structures used by or associated withsuch instructions. Non-limiting machine readable medium examples mayinclude solid-state memories, and optical and magnetic media. Specificexamples of machine readable media may include: non-volatile memory,such as semiconductor memory devices (e.g., Electrically ProgrammableRead-Only Memory (EPROM), Electrically Erasable Programmable Read-OnlyMemory (EEPROM)) and flash memory devices; magnetic disks, such asinternal hard disks and removable disks; magneto-optical disks; RandomAccess Memory (RAM); Solid State Drives (SSD); and CD-ROM and DVD-ROMdisks. In some examples, machine readable media may includenon-transitory machine readable media. In some examples, machinereadable media may include machine readable media that is not atransitory propagating signal.

The instructions 18024 may further be transmitted or received over acommunications network 18026 using a transmission medium via the networkinterface device 18020. The Machine 18000 may communicate with one ormore other machines utilizing any one of a number of transfer protocols(e.g., frame relay, internet protocol (IP), transmission controlprotocol (TCP), user datagram protocol (UDP), hypertext transferprotocol (HTTP), etc.). Example communication networks may include alocal area network (LAN), a wide area network (WAN), a packet datanetwork (e.g., the Internet), mobile telephone networks (e.g., cellularnetworks), Plain Old Telephone (POTS) networks, and wireless datanetworks (e.g., Institute of Electrical and Electronics Engineers (IEEE)802.11 family of standards known as Wi-Fi®, IEEE 802.16 family ofstandards known as WiMax®), IEEE 802.15.4 family of standards, a LongTerm Evolution (LTE) family of standards, a Universal MobileTelecommunications System (UMTS) family of standards, peer-to-peer (P2P)networks, among others. In an example, the network interface device18020 may include one or more physical jacks (e.g., Ethernet, coaxial,or phone jacks) or one or more antennas to connect to the communicationsnetwork 18026. In an example, the network interface device 18020 mayinclude a plurality of antennas to wirelessly communicate using at leastone of single-input multiple-output (SIMO), multiple-inputmultiple-output (MIMO), or multiple-input single-output (MISO)techniques. In some examples, the network interface device 18020 maywirelessly communicate using Multiple User MIMO techniques.

OTHER NOTES AND EXAMPLES

Example 1 is a method for secure mobile wallet communications, themethod comprising: receiving over a network from a mobile wallet useragent (MUA) of a mobile wallet application executing on a computingdevice of a user, a message addressed to a recipient mobile walletapplication in a recipient mobile wallet domain, the recipient mobilewallet domain a top level domain that is specific to mobile walletapplications; determining an IP address of a message transfer agent(MTA) of the recipient mobile wallet domain; and sending the message tothe MTA of the recipient mobile wallet domain, the MTA of the recipientmobile wallet domain to forward the message to the recipient mobilewallet application.

In Example 2, the subject matter of Example 1 optionally includesreceiving a request for a public key of a recipient mobile wallet fromthe MUA; determining an Internet Protocol (IP) address of a public keyserver (PKS) of the recipient mobile wallet domain; requesting thepublic key of the recipient mobile wallet application from the PKS;receiving the public key of the recipient mobile wallet from the PKS;and sending the public key to the MUA, wherein the message is encryptedwith the public key of the recipient mobile wallet.

In Example 3, the subject matter of Example 2 optionally includeswherein the public key is part of a digital certificate provided by acertificate authority.

In Example 4, the subject matter of Example 3 optionally includeswherein the method comprises: authenticating the digital certificateprior to sending the public key to the MUA.

In Example 5, the subject matter of any one or more of Examples 1-4optionally include wherein determining the IP address of the MTAcomprises conducting a Domain Name Server (DNS) query with a DNS server.

In Example 6, the subject matter of any one or more of Examples 1-5optionally include wherein determining the IP address of the MTAcomprises determining the IP address from a DNS cache.

In Example 7, the subject matter of any one or more of Examples 1-6optionally include receiving a request for a public key of a recipientmobile wallet from the MUA; determining an Internet Protocol (IP)address of a public key server (PKS) of the recipient mobile walletdomain, wherein the IP address is determined from a DNS cache;requesting the public key of the recipient mobile wallet applicationfrom the PKS; receiving the public key of the recipient mobile walletfrom the PKS, the public key received as part of a digital certificate;authenticating the digital certificate; responsive to successfullyauthenticating the digital certificate, sending the public key to theMUA, wherein the message is encrypted with the public key of therecipient mobile wallet; wherein the message is one of: a payment, arequest for money, a message authorizing a debit, a message authorizinga credit, or a message providing an identification of the user.

Example 8 is a device comprising: a processor; a memory communicativelycoupled to the processor and including instructions which when performedby a machine, cause the machine to perform operations comprising:receiving over a network from a mobile wallet user agent (MUA) of amobile wallet application executing on a computing device of a user, amessage addressed to a recipient mobile wallet application in arecipient mobile wallet domain, the recipient mobile wallet domain a toplevel domain that is specific to mobile wallet applications; determiningan IP address of a MTA of the recipient mobile wallet domain; andsending the message to the MTA of the recipient mobile wallet domain,the MTA of the recipient mobile wallet domain to forward the message tothe recipient mobile wallet application.

In Example 9, the subject matter of Example 8 optionally includeswherein the operations further comprise: receiving a request for apublic key of a recipient mobile wallet from the MUA; determining anInternet Protocol (IP) address of a public key server (PKS) of therecipient mobile wallet domain; requesting the public key of therecipient mobile wallet application from the PKS; receiving the publickey of the recipient mobile wallet from the PKS; and send the public keyto the MUA, wherein the message is encrypted with the public key of therecipient mobile wallet.

In Example 10, the subject matter of Example 9 optionally includeswherein the public key is part of a digital certificate provided by acertificate authority.

In Example 11, the subject matter of Example 10 optionally includeswherein the operations further comprise: authenticating the digitalcertificate prior to sending the public key to the MUA.

In Example 12, the subject matter of any one or more of Examples 8-11optionally include wherein the operations to determine the IP address ofthe MTA comprises operations comprising conducting a Domain Name Server(DNS) query with a DNS server.

In Example 13, the subject matter of any one or more of Examples 8-12optionally include wherein the operations to determine the IP address ofthe MTA comprises operations comprising determining the IP address froma DNS cache.

In Example 14, the subject matter of any one or more of Examples 8-13optionally include wherein the operations further comprise: receiving arequest for a public key of a recipient mobile wallet from the MUA;determining an Internet Protocol (IP) address of a public key server(PKS) of the recipient mobile wallet domain, wherein the IP address isdetermined from a DNS cache; requesting the public key of the recipientmobile wallet application from the PKS; receiving the public key of therecipient mobile wallet from the PKS, the public key received as part ofa digital certificate; authenticating the digital certificate;responsive to successfully authenticating the digital certificate,sending the public key to the MUA, wherein the message is encrypted withthe public key of the recipient mobile wallet; wherein the message isone of: a payment, a request for money, a message authorizing a debit, amessage authorizing a credit, or a message providing an identificationof the user.

Example 15 is a non-transitory machine readable medium for secure mobilewallet communications, the machine readable medium comprisinginstructions, which when performed by a machine, cause the machine toperform operations comprising: receiving over a network from a mobilewallet user agent (MUA) of a mobile wallet application executing on acomputing device of a user, a message addressed to a recipient mobilewallet application in a recipient mobile wallet domain, the recipientmobile wallet domain a top level domain that is specific to mobilewallet applications; determining an IP address of a message transferagent (MTA) of the recipient mobile wallet domain; and sending themessage to the MTA of the recipient mobile wallet domain, the MTA of therecipient mobile wallet domain to forward the message to the recipientmobile wallet application.

In Example 16, the subject matter of Example 15 optionally includeswherein the operations further comprise: receiving a request for apublic key of a recipient mobile wallet from the MUA; determining anInternet Protocol (IP) address of a public key server (PKS) of therecipient mobile wallet domain; requesting the public key of therecipient mobile wallet application from the PKS; receiving the publickey of the recipient mobile wallet from the PKS; and sending the publickey to the MUA, wherein the message is encrypted with the public key ofthe recipient mobile wallet.

In Example 17, the subject matter of Example 16 optionally includeswherein the public key is part of a digital certificate provided by acertificate authority.

In Example 18, the subject matter of Example 17 optionally includeswherein the operations further comprise: authenticating the digitalcertificate prior to sending the public key to the MUA.

In Example 19, the subject matter of any one or more of Examples 15-18optionally include wherein the operations of determining the IP addressof the MTA comprises the operations of conducting a Domain Name Server(DNS) query with a DNS server.

In Example 20, the subject matter of any one or more of Examples 15-19optionally include wherein the operations of determining the IP addressof the MTA comprises the operations of determining the IP address from aDNS cache.

In Example 21, the subject matter of any one or more of Examples 15-20optionally include wherein the operations further comprise: receiving arequest for a public key of a recipient mobile wallet from the MUA;determining an Internet Protocol (IP) address of a public key server(PKS) of the recipient mobile wallet domain, wherein the IP address isdetermined from a DNS cache; requesting the public key of the recipientmobile wallet application from the PKS; receiving the public key of therecipient mobile wallet from the PKS, the public key received as part ofa digital certificate; authenticating the digital certificate;responsive to successfully authenticating the digital certificate,sending the public key to the MUA, wherein the message is encrypted withthe public key of the recipient mobile wallet; wherein the message isone of: a payment, a request for money, a message authorizing a debit, amessage authorizing a credit, or a message providing an identificationof the user.

Example 22 is a system for securing transactional message communication,the system comprising: at least one processor; and a computer readablemedium including instructions that, when executed by the at least oneprocessor, cause the at least one processor to perform operations to:divide a transactional message into a first transaction unit and asecond transaction unit; generate a first cryptographic key and a secondcryptographic key; encrypt the first transaction unit using the secondcryptographic key and the second transaction unit using the firstcryptographic key; create a first data packet including the encryptedfirst transaction unit and the second cryptographic key and a seconddata packet including the encrypted second transaction unit and thefirst cryptographic key; and transmit the first data packet over a firsttransmission path and the second data packet over a second transmissionpath.

In Example 23, the subject matter of Example 22 optionally includeswherein the first data packet includes a reference to the second datapacket and the second data packet includes a reference to the first datapacket.

In Example 24, the subject matter of any one or more of Examples 22-23optionally include wherein the first transmission path uses a firstwireless protocol and the second transmission path uses a secondwireless protocol.

In Example 25, the subject matter of any one or more of Examples 22-24optionally include wherein the first transmission path uses a firstphysical network and the second transmission path uses a second physicalnetwork.

In Example 26, the subject matter of any one or more of Examples 22-25optionally include wherein the first transmission path uses a cellularnetwork and the second communication path uses a Wi-Fi network.

In Example 27, the subject matter of any one or more of Examples 22-26optionally include wherein the first communication path uses a telephonecompany network and the second transmission path uses an internetconnection.

In Example 28, the subject matter of any one or more of Examples 22-27optionally include wherein the instructions further cause the at leastone processor to perform operations to: receive a request that indicatesthat one of the first data packet and the second data packet was notreceived by a recipient; and retransmit, in response to receipt of therequest, the first data packet and the second data packet.

In Example 29, the subject matter of Example 28 optionally includeswherein the instructions further cause the at least one processor toperform operations to: generate a third cryptographic key and a fourthcryptographic key; and encrypt the first transaction unit and the secondtransaction unit before retransmitting the first data packet and thesecond data packet, wherein the fourth cryptographic key is used toencrypt the first transaction unit and the third cryptographic key isused to encrypt the second transaction unit.

In Example 30, the subject matter of any one or more of Examples 22-29optionally include wherein the instructions further cause the at leastone processor to perform operations to: determine a first half and asecond half of the transactional message, wherein the first transactionunit includes the first half and the second transaction unit includesthe second half.

In Example 31, the subject matter of any one or more of Examples 22-30optionally include wherein the instructions further cause the at leastone processor to perform operations to: extract odd lines and even linesfrom the transactional message, wherein the first transaction unitincludes the odd lines and the second transaction unit includes the evenlines.

Example 32 is at least one computer readable medium includinginstructions for securing transactional message communication that, whenexecuted by at least one processor, cause the at least one processor toperform operations to: divide a transactional message into a firsttransaction unit and a second transaction unit; generate a firstcryptographic key and a second cryptographic key; encrypt the firsttransaction unit using the second cryptographic key and the secondtransaction unit using the first cryptographic key; create a first datapacket including the encrypted first transaction unit and the secondcryptographic key and a second data packet including the encryptedsecond transaction unit and the first cryptographic key; and transmitthe first data packet over a first transmission path and the second datapacket over a second transmission path.

In Example 33, the subject matter of Example 32 optionally includeswherein the first data packet includes a reference to the second datapacket and the second data packet includes a reference to the first datapacket.

In Example 34, the subject matter of any one or more of Examples 32-33optionally include wherein the first transmission path uses a firstwireless protocol and the second transmission path uses a secondwireless protocol.

In Example 35, the subject matter of any one or more of Examples 32-34optionally include wherein the first transmission path uses a firstphysical network and the second transmission path uses a second physicalnetwork.

In Example 36, the subject matter of any one or more of Examples 32-35optionally include wherein the first transmission path uses a cellularnetwork and the second communication path uses a Wi-Fi network.

In Example 37, the subject matter of any one or more of Examples 32-36optionally include wherein the first communication path uses a telephonecompany network and the second transmission path uses an internetconnection.

In Example 38, the subject matter of any one or more of Examples 32-37optionally include wherein the instructions further cause the at leastone processor to perform operations to: receive a request that indicatesthat one of the first data packet and the second data packet was notreceived by a recipient; and retransmit, in response to receipt of therequest, the first data packet and the second data packet.

In Example 39, the subject matter of Example 38 optionally includeswherein the instructions further cause the at least one processor toperform operations to: generate a third cryptographic key and a fourthcryptographic key; and encrypt the first transaction unit and the secondtransaction unit before retransmitting the first data packet and thesecond data packet, wherein the fourth cryptographic key is used toencrypt the first transaction unit and the third cryptographic key isused to encrypt the second transaction unit.

In Example 40, the subject matter of any one or more of Examples 32-39optionally include wherein the instructions further cause the at leastone processor to perform operations to: determine a first half and asecond half of the transactional message, wherein the first transactionunit includes the first half and the second transaction unit includesthe second half.

In Example 41, the subject matter of any one or more of Examples 32-40optionally include wherein the instructions further cause the at leastone processor to perform operations to: extract odd lines and even linesfrom the transactional message, wherein the first transaction unitincludes the odd lines and the second transaction unit includes the evenlines.

Example 42 is a method for securing transactional message communication,the method comprising: dividing a transactional message into a firsttransaction unit and a second transaction unit; generating a firstcryptographic key and a second cryptographic key; encrypting the firsttransaction unit using the second cryptographic key and the secondtransaction unit using the first cryptographic key; creating a firstdata packet including the encrypted first transaction unit and thesecond cryptographic key and a second data packet including theencrypted second transaction unit and the first cryptographic key; andtransmitting the first data packet over a first transmission path andthe second data packet over a second transmission path.

In Example 43, the subject matter of Example 42 optionally includeswherein the first data packet includes a reference to the second datapacket and the second data packet includes a reference to the first datapacket.

In Example 44, the subject matter of any one or more of Examples 42-43optionally include wherein the first transmission path uses a firstwireless protocol and the second transmission path uses a secondwireless protocol.

In Example 45, the subject matter of any one or more of Examples 42-44optionally include wherein the first transmission path uses a firstphysical network and the second transmission path uses a second physicalnetwork.

In Example 46, the subject matter of any one or more of Examples 42-45optionally include wherein the first transmission path uses a cellularnetwork and the second communication path uses a Wi-Fi network.

In Example 47, the subject matter of any one or more of Examples 42-46optionally include wherein the first communication path uses a telephonecompany network and the second transmission path uses an internetconnection.

In Example 48, the subject matter of any one or more of Examples 42-47optionally include receiving a request indicating that one of the firstdata packet and the second data packet was not received by a recipient;and retransmitting, in response to receiving the request, the first datapacket and the second data packet.

In Example 49, the subject matter of Example 48 optionally includesgenerating a third cryptographic key and a fourth cryptographic key; andencrypting the first transaction unit using the fourth cryptographic keyand the second transaction unit using the third cryptographic key beforeretransmitting the first data packet and the second data packet.

In Example 50, the subject matter of any one or more of Examples 42-49optionally include determining a first half and a second half of thetransactional message, wherein the first transaction unit includes thefirst half and the second transaction unit includes the second half.

In Example 51, the subject matter of any one or more of Examples 42-50optionally include extracting odd lines and even lines from thetransactional message, wherein the first transaction unit includes theodd lines and the second transaction unit includes the even lines.

Example 52 is a method for securing transactional message communication,the method comprising: receiving a first data packet over a firsttransmission path and a second data packet over a second transmissionpath, the first data packet including a first encrypted transaction unitand a second cryptographic key and the second data packet including asecond encrypted transaction unit and a first cryptographic key;decrypting the first encrypted transaction unit using the secondcryptographic key and the second encrypted transaction unit using thefirst cryptographic key; combining the first decrypted transaction unitand the second decrypted transaction unit into a transactional message;and forwarding the transactional message to a mobile wallet for furtherprocessing.

In Example 53, the subject matter of Example 52 optionally includeswherein the first data packet includes a reference to the second datapacket and the second data packet includes a reference to the first datapacket.

In Example 54, the subject matter of any one or more of Examples 52-53optionally include wherein the first transmission path uses a firstwireless protocol and the second transmission path uses a secondwireless protocol.

In Example 55, the subject matter of any one or more of Examples 52-54optionally include wherein the first transmission path uses a firstphysical network and the second transmission path uses a second physicalnetwork.

In Example 56, the subject matter of any one or more of Examples 52-55optionally include wherein the first transmission path uses a cellularnetwork and the second communication path uses a Wi-Fi network.

In Example 57, the subject matter of any one or more of Examples 52-56optionally include wherein the first communication path uses a telephonecompany network and the second transmission path uses an internetconnection.

In Example 58, the subject matter of any one or more of Examples 52-57optionally include determining that only one data packet of the firstdata packet and the second data packet have been received; transmittinga request to resend the first data packet and the second data packet toa sender of the only data packet; and receiving, in response to therequest, the first data packet and the second data packet.

Example 59 is a method for secure mobile wallet communications, themethod comprising: receiving a message from a second mobile walletaddressed to a first mobile wallet, the message including a portionencrypted with a private key of the second mobile wallet; retrieving apublic key of the second mobile wallet; decrypting the portion with thepublic key to create a decrypted portion; determining that a hash of themessage matches a data field in the decrypted portion; responsive todetermining that the hash of the message matches the hash in thedecrypted portion, marking the message as having come from the secondmobile wallet; and presenting that the message came from the secondmobile wallet to a user.

In Example 60, the subject matter of Example 59 optionally includeswherein retrieving the public key of the second mobile wallet comprises:contacting a public key server of a domain of the second mobile wallet.

In Example 61, the subject matter of any one or more of Examples 59-60optionally include sending a challenge message to the second mobilewallet, the challenge message requesting details about at least one of:account details of a user of the first mobile wallet known to the secondmobile wallet, transaction details of a user of the first mobile walletknown to the second mobile wallet, a predetermined data field know toboth the first and second mobile wallets, and driver's licenseinformation of the user of the first mobile wallet; receiving achallenge-response; determining whether the challenge-response includesa correct answer to the challenge message; responsive to determiningthat the challenge-response includes the correct answer, marking themessage as authenticated; and causing a display indicating that themessage is authenticated.

In Example 62, the subject matter of any one or more of Examples 59-61optionally include wherein retrieving the public key, decrypting theportion with the public key, determining that the hash matches the hashin the decrypted portion, marking the message, and presenting themessage is done automatically in response to receiving the message.

In Example 63, the subject matter of any one or more of Examples 59-62optionally include wherein retrieving the public key, decrypting theportion with the public key, determining that the hash matches the hashin the decrypted portion, marking the message, and presenting themessage is done upon a user request in response to receiving themessage.

In Example 64, the subject matter of any one or more of Examples 59-63optionally include wherein retrieving the public key, decrypting theportion with the public key, determining that the hash matches the hashin the decrypted portion, marking the message, and presenting themessage is done automatically based upon determining that a type of themessage is a predetermined type of message.

In Example 65, the subject matter of any one or more of Examples 59-64optionally include determining that the hash of the message does notmatch the hash in the decrypted portion; responsive to determining thatthe hash of the message does not match the hash in the decryptedportion, marking the message as suspicious; and presenting that themessage is unverified to a user.

Example 66 is a device for facilitating secure mobile walletcommunications, the device comprising: a processor; a memorycommunicatively coupled to the processor, the memory comprisinginstructions that when performed by the processor, causes the processorto perform operations to at least: receive a message from a secondmobile wallet addressed to a first mobile wallet, the message includinga portion encrypted with a private key of the second mobile wallet;retrieve a public key of the second mobile wallet; decrypt the portionwith the public key to create a decrypted portion; determine that a hashof the message matches a data field in the decrypted portion; responsiveto a determination that the hash of the message matches the hash in thedecrypted portion, mark the message as having come from the secondmobile wallet; and present that the message came from the second mobilewallet to a user.

In Example 67, the subject matter of Example 66 optionally includeswherein the operations to retrieve the public key of the second mobilewallet comprises operations to at least: contact a public key server ofa domain of the second mobile wallet.

In Example 68, the subject matter of any one or more of Examples 66-67optionally include wherein the operations further comprise operationsto: send a challenge message to the second mobile wallet, the challengemessage requesting details about at least one of account details of auser of the first mobile wallet known to the second mobile wallet,transaction details of a user of the first mobile wallet known to thesecond mobile wallet, a predetermined data field know to both the firstand second mobile wallets, and driver's license information of the userof the first mobile wallet; receive a challenge-response; determinewhether the challenge-response includes a correct answer to thechallenge message; responsive to a determination that thechallenge-response includes the correct answer, mark the message asauthenticated; and cause a display indicating that the message isauthenticated.

In Example 69, the subject matter of any one or more of Examples 66-68optionally include wherein the operations to retrieve the public key,decrypt the portion with the public key, determine that the hash matchesthe hash in the decrypted portion, mark the message, and present themessage is done automatically in response to receipt of the message.

In Example 70, the subject matter of any one or more of Examples 66-69optionally include wherein the operations to retrieve the public key,decrypt the portion with the public key, determine that the hash matchesthe hash in the decrypted portion, mark the message, and present themessage is done upon receipt of a user request in response to a receiptof the message.

In Example 71, the subject matter of any one or more of Examples 66-70optionally include wherein the operations to retrieve the public key,decrypt the portion with the public key, determine that the hash matchesthe hash in the decrypted portion, mark the message, and present themessage is done automatically based upon a determination that a type ofthe message is a predetermined type of message.

In Example 72, the subject matter of any one or more of Examples 66-71optionally include wherein the operations further comprise operationsto: determine that the hash of the message does not match the hash inthe decrypted portion; responsive to the determination that the hash ofthe message does not match the hash in the decrypted portion, mark themessage as suspicious; and present that the message is unverified to auser.

Example 73 is a non-transitory machine readable medium for secure mobilewallet communications, the machine readable medium comprisinginstructions, which when performed by the machine, causes the machine toperform operations comprising: receiving a message from a second mobilewallet addressed to a first mobile wallet, the message including aportion encrypted with a private key of the second mobile wallet;retrieving a public key of the second mobile wallet; decrypting theportion with the public key to create a decrypted portion; determiningthat a hash of the message matches a data field in the decryptedportion; responsive to determining that the hash of the message matchesthe hash in the decrypted portion, marking the message as having comefrom the second mobile wallet; and presenting that the message came fromthe second mobile wallet to a user.

In Example 74, the subject matter of Example 73 optionally includeswherein the operations of retrieving the public key of the second mobilewallet comprises the operations of: contacting a public key server of adomain of the second mobile wallet.

In Example 75, the subject matter of any one or more of Examples 73-74optionally include wherein the operations further comprise: sending achallenge message to the second mobile wallet, the challenge messagerequesting details about at least one of: account details of a user ofthe first mobile wallet known to the second mobile wallet, transactiondetails of a user of the first mobile wallet known to the second mobilewallet, a predetermined data field know to both the first and secondmobile wallets, and driver's license information of the user of thefirst mobile wallet; receiving a challenge-response; determining whetherthe challenge-response includes a correct answer to the challengemessage; responsive to determining that the challenge-response includesthe correct answer, marking the message as authenticated; and causing adisplay indicating that the message is authenticated.

In Example 76, the subject matter of any one or more of Examples 73-75optionally include wherein the operations of retrieving the public key,decrypting the portion with the public key, determining that the hashmatches the hash in the decrypted portion, marking the message, andpresenting the message is done automatically in response to receivingthe message.

In Example 77, the subject matter of any one or more of Examples 73-76optionally include wherein the operations of retrieving the public key,decrypting the portion with the public key, determining that the hashmatches the hash in the decrypted portion, marking the message, andpresenting the message is done upon a user request in response toreceiving the message.

In Example 78, the subject matter of any one or more of Examples 73-77optionally include wherein the operations of retrieving the public key,decrypting the portion with the public key, determining that the hashmatches the hash in the decrypted portion, marking the message, andpresenting the message is done automatically based upon determining thata type of the message is a predetermined type of message.

In Example 79, the subject matter of any one or more of Examples 73-78optionally include wherein the operations further comprise: determiningthat the hash of the message does not match the hash in the decryptedportion; responsive to determining that the hash of the message does notmatch the hash in the decrypted portion, marking the message assuspicious; and presenting that the message is unverified to a user.

What is claimed is:
 1. A method for secure mobile wallet communications,the method comprising: using one or more processors: executing a firstmobile wallet application that performs operations comprising:receiving, over a network, a message from a second mobile walletapplication; determining that the message is to have both signatureverification and application layer verification based upon one or moreof: a type of the message, a content of the message, a sender of themessage; responsive to determining that the message is to have both thesignature verification and the application layer verification:performing the signature verification by determining that a calculatedhash of the message matches a hash value contained in the message, thehash value contained in the message in an encrypted form, and responsiveto verifying that the calculated hash of the message matches the hashvalue contained in the message, performing application layerverification by determining that a challenge-response message receivedfrom the second mobile wallet application includes a correct answer to achallenge message sent from the first mobile wallet applicationrequesting financial account information about the first mobile walletapplication; and responsive to verifying the signature and verifying themessage at an application layer, engaging in a financial transactionwith the second mobile wallet application.
 2. The method of claim 1,further comprising: contacting a public key server of a domain of thesecond mobile wallet application; obtaining a public key of the secondmobile wallet application from the public key server; and whereindetermining that the calculated hash of the message matches the hashvalue contained in the message comprises decrypting the hash valuecontained in the message using the public key of the second mobilewallet application.
 3. The method of claim 1, further comprising:receiving a second message from a third mobile wallet application;determining that a hash of the second message does not match a hash in adecrypted portion of the second message; and responsive to determiningthat the hash of the second message does not match the hash in thedecrypted portion of the second message, marking the second message asunverified.
 4. The method of claim 1, further comprising: receiving asecond message from a third mobile wallet application; sending a secondchallenge to the third mobile wallet application; receiving a secondchallenge-response from the third mobile wallet application; determiningwhether the second challenge-response includes a second correct answerto the challenge; and responsive to determining that the secondchallenge-response does not include the second correct answer, markingthe message from the second mobile wallet application as unverified. 5.The method of claim 1, further comprising: receiving a second messagefrom a third mobile wallet application; determining that the secondmessage is to have signature verification but not application layerverification based upon one or more of: a type of the second message, acontent of the second message, a sender of the second message;responsive to determining that the second message is to have thesignature verification but not the application layer verification,verifying the signature; and responsive to verifying the signature,engaging in a financial transaction with the third mobile walletapplication.
 6. The method of claim 1, further comprising: receiving asecond message from a third mobile wallet application; determining thatthe second message is to have neither signature verification norapplication layer verification based upon one or more of: a type of thesecond message, a content of the second message, a sender of the secondmessage; and responsive to determining that the second message is tohave neither the signature verification nor the application layerverification, engaging in a financial transaction with the third mobilewallet application.
 7. The method of claim 1, wherein the financialtransaction is a payment transaction.
 8. A device for secure mobilewallet communications, the device comprising: one or more processors; amemory, storing instructions of a first mobile wallet application, theinstructions, which when executed by the one or more processors, causethe one or more processors to perform operations comprising: receiving,over a network, a message from a second mobile wallet application;determining that the message is to have both signature verification andapplication layer verification based upon one or more of: a type of themessage, a content of the message, a sender of the message; responsiveto determining that the message is to have both the signatureverification and the application layer verification: performing thesignature verification by determining that a calculated hash of themessage matches a hash value contained in the message, the hash valuecontained in the message in an encrypted form, and responsive toverifying that the calculated hash of the message matches the hash valuecontained in the message, performing application layer verification bydetermining that a challenge-response message received from the secondmobile wallet application includes a correct answer to a challengemessage sent from the first mobile wallet application requestingfinancial account information about the first mobile wallet application;and responsive to verifying the signature and verifying the message atan application layer, engaging in a financial transaction with thesecond mobile wallet application.
 9. The device of claim 8, wherein theoperations further comprise: contacting a public key server of a domainof the second mobile wallet application; obtaining a public key of thesecond mobile wallet application from the public key server; and whereindetermining that the calculated hash of the message matches the hashvalue contained in the message comprises decrypting the hash valuecontained in the message using the public key of the second mobilewallet application.
 10. The device of claim 8, wherein the operationsfurther comprise: receiving a second message from a third mobile walletapplication; determining that a hash of the second message does notmatch a hash in a decrypted portion of the second message; andresponsive to determining that the hash of the second message does notmatch the hash in the decrypted portion of the second message, markingthe second message as unverified.
 11. The device of claim 8, wherein theoperations further comprise: receiving a second message from a thirdmobile wallet application; sending a second challenge to the thirdmobile wallet application; receiving a second challenge-response fromthe third mobile wallet application; determining whether the secondchallenge-response includes a second correct answer to the challenge;and responsive to determining that the second challenge-response doesnot include the second correct answer, marking the message from thesecond mobile wallet application as unverified.
 12. The device of claim8, wherein the operations further comprise: receiving a second messagefrom a third mobile wallet application; determining that the secondmessage is to have signature verification but not application layerverification based upon one or more of: a type of the second message, acontent of the second message, a sender of the second message;responsive to determining that the second message is to have thesignature verification but not the application layer verification,verifying the signature; and responsive to verifying the signature,engaging in a financial transaction with the third mobile walletapplication.
 13. The device of claim 8, wherein the operations furthercomprise: receiving a second message from a third mobile walletapplication; determining that the second message is to have neithersignature verification nor application layer verification based upon oneor more of: a type of the second message, a content of the secondmessage, a sender of the second message; and responsive to determiningthat the second message is to have neither the signature verificationnor the application layer verification, engaging in a financialtransaction with the third mobile wallet application.
 14. The device ofclaim 8, wherein the financial transaction is a payment transaction. 15.A non-transitory machine-readable storage medium, storing instructionsof a first mobile wallet application, the instructions, which whenexecuted by a machine, cause the machine to perform operationscomprising: receiving, over a network, a message from a second mobilewallet application; determining that the message is to have bothsignature verification and application layer verification based upon oneor more of: a type of the message, a content of the message, a sender ofthe message; responsive to determining that the message is to have boththe signature verification and the application layer verification:performing the signature verification by determining that a calculatedhash of the message matches a hash value contained in the message, thehash value contained in the message in an encrypted form, and responsiveto verifying that the calculated hash of the message matches the hashvalue contained in the message, performing application layerverification by determining that a challenge-response message receivedfrom the second mobile wallet application includes a correct answer to achallenge message sent from the first mobile wallet applicationrequesting financial account information about the first mobile walletapplication; and responsive to verifying the signature and verifying themessage at an application layer, engaging in a financial transactionwith the second mobile wallet application.
 16. The non-transitorymachine-readable storage medium of claim 15, wherein the operationsfurther comprise: contacting a public key server of a domain of thesecond mobile wallet application; obtaining a public key of the secondmobile wallet application from the public key server; and whereindetermining that the calculated hash of the message matches the hashvalue contained in the message comprises decrypting the hash valuecontained in the message using the public key of the second mobilewallet application.
 17. The non-transitory machine-readable storagemedium of claim 15, wherein the operations further comprise: receiving asecond message from a third mobile wallet application; determining thata hash of the second message does not match a hash in a decryptedportion of the second message; and responsive to determining that thehash of the second message does not match the hash in the decryptedportion of the second message, marking the second message as unverified.18. The non-transitory machine-readable storage medium of claim 15,wherein the operations further comprise: receiving a second message froma third mobile wallet application; sending a second challenge to thethird mobile wallet application; receiving a second challenge-responsefrom the third mobile wallet application; determining whether the secondchallenge-response includes a second correct answer to the challenge;and responsive to determining that the second challenge-response doesnot include the second correct answer, marking the message from thesecond mobile wallet application as unverified.
 19. The non-transitorymachine-readable storage medium of claim 15, wherein the operationsfurther comprise: receiving a second message from a third mobile walletapplication; determining that the second message is to have signatureverification but not application layer verification based upon one ormore of: a type of the second message, a content of the second message,a sender of the second message; responsive to determining that thesecond message is to have the signature verification but not theapplication layer verification, verifying the signature; and responsiveto verifying the signature, engaging in a financial transaction with thethird mobile wallet application.
 20. The non-transitory machine-readablestorage medium of claim 15, wherein the operations further comprise:receiving a second message from a third mobile wallet application;determining that the second message is to have neither signatureverification nor application layer verification based upon one or moreof: a type of the second message, a content of the second message, asender of the second message; and responsive to determining that thesecond message is to have neither the signature verification nor theapplication layer verification, engaging in a financial transaction withthe third mobile wallet application.